@tanstack/ai-sandbox-cloudflare 0.3.3 → 0.3.5

package/dist/esm/fs-write.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Build in-container `sh -c` commands that write a file without putting the
+ * whole payload on one argv.
+ *
+ * Linux `MAX_ARG_STRLEN` is 128 KiB for a single argument. A snapshot restore
+ * of a lockfile or generated source exceeds that when the bytes are quoted
+ * into `printf`.
+ */
+/** Stay well under `MAX_ARG_STRLEN` after base64 and quoting. */
+export declare const FS_WRITE_BYTE_CHUNK = 32768;
+export declare function fsWriteCommands(abs: string, data: string | Uint8Array): Array<string>;

package/dist/esm/fs-write.js

@@ -0,0 +1,28 @@
+//#region src/fs-write.ts
+/**
+* Build in-container `sh -c` commands that write a file without putting the
+* whole payload on one argv.
+*
+* Linux `MAX_ARG_STRLEN` is 128 KiB for a single argument. A snapshot restore
+* of a lockfile or generated source exceeds that when the bytes are quoted
+* into `printf`.
+*/
+/** Stay well under `MAX_ARG_STRLEN` after base64 and quoting. */
+var FS_WRITE_BYTE_CHUNK = 32768;
+function quote(value) {
+	return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+function fsWriteCommands(abs, data) {
+	const bytes = typeof data === "string" ? Buffer.from(data, "utf8") : Buffer.from(data);
+	const commands = [`mkdir -p ${quote(abs.replace(/\/[^/]*$/, "") || "/")} && : > ${quote(abs)}`];
+	for (let offset = 0; offset < bytes.byteLength; offset += FS_WRITE_BYTE_CHUNK) {
+		const slice = bytes.subarray(offset, offset + FS_WRITE_BYTE_CHUNK);
+		const b64 = Buffer.from(slice).toString("base64");
+		commands.push(`printf %s ${quote(b64)} | base64 -d >> ${quote(abs)}`);
+	}
+	return commands;
+}
+//#endregion
+export { FS_WRITE_BYTE_CHUNK, fsWriteCommands };
+
+//# sourceMappingURL=fs-write.js.map

package/dist/esm/fs-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-write.js","names":[],"sources":["../../src/fs-write.ts"],"sourcesContent":["/**\n * Build in-container `sh -c` commands that write a file without putting the\n * whole payload on one argv.\n *\n * Linux `MAX_ARG_STRLEN` is 128 KiB for a single argument. A snapshot restore\n * of a lockfile or generated source exceeds that when the bytes are quoted\n * into `printf`.\n */\n\n/** Stay well under `MAX_ARG_STRLEN` after base64 and quoting. */\nexport const FS_WRITE_BYTE_CHUNK = 32_768\n\nfunction quote(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`\n}\n\nexport function fsWriteCommands(\n  abs: string,\n  data: string | Uint8Array,\n): Array<string> {\n  const bytes =\n    typeof data === 'string' ? Buffer.from(data, 'utf8') : Buffer.from(data)\n  const dir = abs.replace(/\\/[^/]*$/, '') || '/'\n  const commands = [`mkdir -p ${quote(dir)} && : > ${quote(abs)}`]\n  for (\n    let offset = 0;\n    offset < bytes.byteLength;\n    offset += FS_WRITE_BYTE_CHUNK\n  ) {\n    const slice = bytes.subarray(offset, offset + FS_WRITE_BYTE_CHUNK)\n    const b64 = Buffer.from(slice).toString('base64')\n    commands.push(`printf %s ${quote(b64)} | base64 -d >> ${quote(abs)}`)\n  }\n  return commands\n}\n"],"mappings":";;;;;;;;;;AAUA,IAAa,sBAAsB;AAEnC,SAAS,MAAM,OAAuB;CACpC,OAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,EAAE;AAC1C;AAEA,SAAgB,gBACd,KACA,MACe;CACf,MAAM,QACJ,OAAO,SAAS,WAAW,OAAO,KAAK,MAAM,MAAM,IAAI,OAAO,KAAK,IAAI;CAEzE,MAAM,WAAW,CAAC,YAAY,MADlB,IAAI,QAAQ,YAAY,EAAE,KAAK,GACJ,EAAE,UAAU,MAAM,GAAG,GAAG;CAC/D,KACE,IAAI,SAAS,GACb,SAAS,MAAM,YACf,UAAU,qBACV;EACA,MAAM,QAAQ,MAAM,SAAS,QAAQ,SAAS,mBAAmB;EACjE,MAAM,MAAM,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,QAAQ;EAChD,SAAS,KAAK,aAAa,MAAM,GAAG,EAAE,kBAAkB,MAAM,GAAG,GAAG;CACtE;CACA,OAAO;AACT"}

package/dist/esm/handle.d.ts

@@ -16,6 +16,7 @@ export declare class CloudflareHandle implements SandboxHandle {
     private readonly previewHostname;
     constructor(id: string, sandbox: Sandbox, workdir: string, previewHostname?: string);
     private abs;
+    private lstat;
     private exec;
     private spawnProcess;
     private connectPort;

package/dist/esm/handle.js

@@ -1,11 +1,12 @@
+import { fsWriteCommands } from "./fs-write.js";
 import { createExecBackedGit } from "@tanstack/ai-sandbox";
 //#region src/handle.ts
 /**
 * SandboxHandle backed by a Cloudflare Sandbox (Containers + Durable Objects),
 * via `@cloudflare/sandbox`. Runs at the edge inside a Worker.
 *
-* fs is implemented over `exec` with base64 piping (binary-safe), matching the
-* Docker provider. The container disk is EPHEMERAL (wiped to the image on
+* fs is implemented over `exec` with chunked base64 piping (binary-safe),
+* matching the Docker provider. The container disk is EPHEMERAL (wiped to the image on
 * restart) and snapshots are not yet GA, so `capabilities.snapshots` and
 * `durableFilesystem` are false — `withSandbox` re-bootstraps under the same
 * identity across cold starts.
@@ -39,6 +40,38 @@ var CLOUDFLARE_CAPS = {
 function q(value) {
 	return `'${value.replace(/'/g, `'\\''`)}'`;
 }
+var LSTAT_MISSING = "__TANSTACK_LSTAT_MISSING__";
+/** Verify a missing path by listing parent entries. `test -e` also fails for inaccessible parents. */
+function lstatCommand(path) {
+	return `tanstack_lstat_path=${q(path)}; tanstack_lstat_output=$(stat -c '%f:%s' -- "$tanstack_lstat_path" 2>&1); tanstack_lstat_status=$?; if [ "$tanstack_lstat_status" -eq 0 ]; then printf '%s\n' "$tanstack_lstat_output"; else tanstack_lstat_missing() { tanstack_missing_path=$1; case "$tanstack_missing_path" in /|.) return 1 ;; */*) tanstack_parent=\${tanstack_missing_path%/*}; tanstack_name=\${tanstack_missing_path##*/}; [ -n "$tanstack_parent" ] || tanstack_parent=/ ;; *) tanstack_parent=.; tanstack_name=$tanstack_missing_path ;; esac; tanstack_parent_mode=$(stat -L -c '%f' -- "$tanstack_parent" 2>/dev/null); tanstack_parent_status=$?; if [ "$tanstack_parent_status" -ne 0 ]; then tanstack_lstat_missing "$tanstack_parent"; else case "$tanstack_parent_mode" in 4[0-9a-fA-F][0-9a-fA-F][0-9a-fA-F]) case "$tanstack_parent" in /*) tanstack_find_parent=$tanstack_parent ;; *) tanstack_find_parent=./$tanstack_parent ;; esac; tanstack_match=$(find -H "$tanstack_find_parent" -mindepth 1 -maxdepth 1 -exec sh -c 'tanstack_target=$1; shift; for tanstack_candidate do [ "\${tanstack_candidate##*/}" = "$tanstack_target" ] && { printf 1; exit 0; }; done; exit 0' sh "$tanstack_name" '{}' + 2>/dev/null); tanstack_find_status=$?; [ "$tanstack_find_status" -eq 0 ] && [ -z "$tanstack_match" ] ;; *) return 1 ;; esac; fi; }; if tanstack_lstat_missing "$tanstack_lstat_path"; then printf '%s' '${LSTAT_MISSING}'; else printf '%s\n' "$tanstack_lstat_output" >&2; exit "$tanstack_lstat_status"; fi; fi`;
+}
+function parseLstatOutput(output) {
+	const fields = /^(?<mode>[0-9a-fA-F]{4}):(?<size>\d+)\n?$/.exec(output);
+	const mode = fields?.groups?.mode;
+	const size = fields?.groups?.size;
+	if (!mode || !size) throw new Error(`invalid lstat output: ${output}`);
+	const parsedMode = Number.parseInt(mode, 16);
+	const parsedSize = Number(size);
+	if (!Number.isSafeInteger(parsedMode) || !Number.isSafeInteger(parsedSize) || parsedSize < 0) throw new Error(`invalid lstat output: ${output}`);
+	const type = parsedMode & 61440;
+	if (type === 32768) return {
+		type: "file",
+		mode: parsedMode,
+		size: parsedSize
+	};
+	if (type === 16384) return {
+		type: "dir",
+		mode: parsedMode
+	};
+	if (type === 40960) return {
+		type: "symlink",
+		mode: parsedMode
+	};
+	return {
+		type: "other",
+		mode: parsedMode
+	};
+}
 /** A push-driven async string queue used to adapt CF's onOutput callback. */
 var OutputQueue = class {
 	buffer = [];
@@ -110,11 +143,10 @@ var CloudflareHandle = class {
 				return new Uint8Array(Buffer.from(r.stdout, "base64"));
 			},
 			write: async (p, data) => {
-				const abs = this.abs(p);
-				const b64 = Buffer.from(typeof data === "string" ? Buffer.from(data, "utf8") : data).toString("base64");
-				const dir = abs.replace(/\/[^/]*$/, "") || "/";
-				const r = await this.exec(`mkdir -p ${q(dir)} && printf %s ${q(b64)} | base64 -d > ${q(abs)}`);
-				if (r.exitCode !== 0) throw new Error(`write failed: ${r.stderr.trim()}`);
+				for (const command of fsWriteCommands(this.abs(p), data)) {
+					const r = await this.exec(command);
+					if (r.exitCode !== 0) throw new Error(`write failed: ${r.stderr.trim()}`);
+				}
 			},
 			list: async (p) => {
 				const r = await this.exec(`ls -1Ap ${q(this.abs(p))}`);
@@ -129,6 +161,7 @@ var CloudflareHandle = class {
 					};
 				});
 			},
+			lstat: async (p) => this.lstat(this.abs(p)),
 			mkdir: async (p) => {
 				await this.exec(`mkdir -p ${q(this.abs(p))}`);
 			},
@@ -152,6 +185,12 @@ var CloudflareHandle = class {
 		if (p.startsWith("/workspace/")) return `${this.workdir}/${p.slice(11)}`;
 		return p;
 	}
+	async lstat(path) {
+		const r = await this.exec(lstatCommand(path));
+		if (r.exitCode === 0 && r.stdout.trim() === LSTAT_MISSING) return void 0;
+		if (r.exitCode !== 0) throw new Error(`lstat failed: ${r.stderr.trim()}`);
+		return parseLstatOutput(r.stdout);
+	}
 	async exec(command, opts) {
 		const result = await this.sandbox.exec(command, {
 			...opts?.cwd ? { cwd: this.abs(opts.cwd) } : { cwd: this.workdir },

package/dist/esm/handle.js.map

@@ -1 +1 @@
-{"version":3,"file":"handle.js","names":[],"sources":["../../src/handle.ts"],"sourcesContent":["/**\n * SandboxHandle backed by a Cloudflare Sandbox (Containers + Durable Objects),\n * via `@cloudflare/sandbox`. Runs at the edge inside a Worker.\n *\n * fs is implemented over `exec` with base64 piping (binary-safe), matching the\n * Docker provider. The container disk is EPHEMERAL (wiped to the image on\n * restart) and snapshots are not yet GA, so `capabilities.snapshots` and\n * `durableFilesystem` are false — `withSandbox` re-bootstraps under the same\n * identity across cold starts.\n *\n * LIMITATION: Cloudflare background processes do not expose a writable host→\n * process stdin, so `spawn().stdin.write` throws. This is advertised via\n * `capabilities.writableStdin: false`; harness adapters that feed a prompt over\n * stdin (e.g. the Claude Code adapter) detect this and instead deliver the\n * prompt via a file + shell stdin-redirection (`claude -p … < file`), which the\n * in-container shell handles with no host-side stdin write. `exec` (one-shot)\n * and streamed stdout from `spawn` both work fully.\n *\n * NOTE: not runtime-verified in this repo (requires a Workers runtime); it\n * compiles against the real `@cloudflare/sandbox` types and follows the proven\n * provider contract.\n */\nimport { createExecBackedGit } from '@tanstack/ai-sandbox'\nimport type { Sandbox } from '@cloudflare/sandbox'\nimport type {\n  ExecResult,\n  ProcessOptions,\n  SandboxCapabilities,\n  SandboxChannel,\n  SandboxHandle,\n  SpawnHandle,\n} from '@tanstack/ai-sandbox'\n\nexport const CLOUDFLARE_CAPS: SandboxCapabilities = {\n  fs: true,\n  exec: true,\n  env: true,\n  ports: true,\n  backgroundProcesses: true,\n  // No writable host→process stdin; stdin-fed harnesses use file-redirection.\n  writableStdin: false,\n  // `spawnProcess.kill()` is a no-op (see the comment in `spawnProcess`) and\n  // the caller's abort signal is never forwarded to `sandbox.exec` — on\n  // `exec` as well as `spawn` — so a spawned follower process (e.g. `tail -f`)\n  // can never be stopped by the caller here.\n  killableProcesses: false,\n  snapshots: false,\n  networkPolicy: false,\n  durableFilesystem: false,\n  fork: false,\n}\n\n/** POSIX single-quote escape for embedding paths in `sh -c`. */\nfunction q(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`\n}\n\n/** A push-driven async string queue used to adapt CF's onOutput callback. */\nclass OutputQueue {\n  private readonly buffer: Array<string> = []\n  private readonly waiters: Array<(r: IteratorResult<string>) => void> = []\n  private ended = false\n\n  push(value: string): void {\n    const waiter = this.waiters.shift()\n    if (waiter) waiter({ value, done: false })\n    else this.buffer.push(value)\n  }\n\n  end(): void {\n    this.ended = true\n    let waiter = this.waiters.shift()\n    while (waiter) {\n      waiter({ value: undefined, done: true })\n      waiter = this.waiters.shift()\n    }\n  }\n\n  async *[Symbol.asyncIterator](): AsyncIterator<string> {\n    while (!this.ended || this.buffer.length > 0) {\n      if (this.buffer.length > 0) {\n        yield this.buffer.shift() as string\n        continue\n      }\n      const next = await new Promise<IteratorResult<string>>((resolve) =>\n        this.waiters.push(resolve),\n      )\n      if (next.done) return\n      yield next.value\n    }\n  }\n}\n\nexport class CloudflareHandle implements SandboxHandle {\n  readonly id: string\n  readonly provider = 'cloudflare'\n  readonly workspaceRoot: string\n  readonly capabilities = CLOUDFLARE_CAPS\n  readonly fs: SandboxHandle['fs']\n  readonly git: SandboxHandle['git']\n  readonly process: SandboxHandle['process']\n  readonly ports: SandboxHandle['ports']\n  readonly env: SandboxHandle['env']\n\n  private readonly sandbox: Sandbox\n  private readonly workdir: string\n  private readonly previewHostname: string | undefined\n\n  constructor(\n    id: string,\n    sandbox: Sandbox,\n    workdir: string,\n    previewHostname?: string,\n  ) {\n    this.id = id\n    this.sandbox = sandbox\n    this.workdir = workdir\n    this.workspaceRoot = workdir\n    this.previewHostname = previewHostname\n\n    this.process = {\n      exec: (command, opts) => this.exec(command, opts),\n      spawn: (command, opts) => this.spawnProcess(command, opts),\n    }\n\n    this.fs = {\n      read: async (p) => {\n        const r = await this.exec(`base64 ${q(this.abs(p))}`)\n        if (r.exitCode !== 0) throw new Error(`read failed: ${r.stderr.trim()}`)\n        return Buffer.from(r.stdout, 'base64').toString('utf8')\n      },\n      readBytes: async (p) => {\n        const r = await this.exec(`base64 ${q(this.abs(p))}`)\n        if (r.exitCode !== 0) throw new Error(`read failed: ${r.stderr.trim()}`)\n        return new Uint8Array(Buffer.from(r.stdout, 'base64'))\n      },\n      write: async (p, data) => {\n        const abs = this.abs(p)\n        const b64 = Buffer.from(\n          typeof data === 'string' ? Buffer.from(data, 'utf8') : data,\n        ).toString('base64')\n        const dir = abs.replace(/\\/[^/]*$/, '') || '/'\n        const r = await this.exec(\n          `mkdir -p ${q(dir)} && printf %s ${q(b64)} | base64 -d > ${q(abs)}`,\n        )\n        if (r.exitCode !== 0)\n          throw new Error(`write failed: ${r.stderr.trim()}`)\n      },\n      list: async (p) => {\n        const r = await this.exec(`ls -1Ap ${q(this.abs(p))}`)\n        if (r.exitCode !== 0) throw new Error(`list failed: ${r.stderr.trim()}`)\n        return r.stdout\n          .split('\\n')\n          .filter((line) => line.trim() !== '')\n          .map((entry) => {\n            const isDir = entry.endsWith('/')\n            const name = isDir ? entry.slice(0, -1) : entry\n            return {\n              name,\n              path: `${p.replace(/\\/$/, '')}/${name}`,\n              type: isDir ? ('dir' as const) : ('file' as const),\n            }\n          })\n      },\n      mkdir: async (p) => {\n        await this.exec(`mkdir -p ${q(this.abs(p))}`)\n      },\n      remove: async (p) => {\n        await this.exec(`rm -rf ${q(this.abs(p))}`)\n      },\n      rename: async (from, to) => {\n        await this.exec(`mv ${q(this.abs(from))} ${q(this.abs(to))}`)\n      },\n      exists: async (p) => {\n        const r = await this.exec(`test -e ${q(this.abs(p))}`)\n        return r.exitCode === 0\n      },\n    }\n\n    this.git = createExecBackedGit(this.process, this.workdir)\n\n    this.ports = {\n      connect: (port) => this.connectPort(port),\n    }\n\n    this.env = {\n      set: (vars) => this.sandbox.setEnvVars(vars),\n    }\n  }\n\n  private abs(p: string): string {\n    if (this.workdir === '/workspace') return p\n    if (p === '/workspace') return this.workdir\n    if (p.startsWith('/workspace/')) {\n      return `${this.workdir}/${p.slice('/workspace/'.length)}`\n    }\n    return p\n  }\n\n  private async exec(\n    command: string,\n    opts?: ProcessOptions,\n  ): Promise<ExecResult> {\n    const result = await this.sandbox.exec(command, {\n      ...(opts?.cwd ? { cwd: this.abs(opts.cwd) } : { cwd: this.workdir }),\n      ...(opts?.env ? { env: opts.env } : {}),\n    })\n    return {\n      stdout: result.stdout,\n      stderr: result.stderr,\n      exitCode: result.exitCode,\n    }\n  }\n\n  private spawnProcess(\n    command: string,\n    opts?: ProcessOptions,\n  ): Promise<SpawnHandle> {\n    const stdout = new OutputQueue()\n    const stderr = new OutputQueue()\n\n    // Stream over `exec({ stream: true, onOutput })` — the SAME proven command\n    // path as one-shot `exec`. The background-process API (`startProcess` +\n    // `streamProcessLogs`) does NOT deliver its `onOutput`/`onExit` callbacks\n    // here (verified under `wrangler dev`: the process runs and exits cleanly,\n    // yet no log events ever arrive), so a stdout-NDJSON harness spawned that\n    // way hangs forever. exec's streaming path emits each chunk via `onOutput`\n    // and resolves with the exit code on completion. The prompt still reaches\n    // the CLI via in-shell stdin redirection (`… < file`), which this session\n    // shell honors — `writableStdin` stays false.\n    //\n    // The caller's AbortSignal is intentionally NOT forwarded: `exec` is a\n    // Durable Object RPC and Workers RPC cannot serialize an AbortSignal\n    // (\"AbortSignal serialization is not enabled\"), so passing one throws\n    // before the command runs. Mid-run cancellation is therefore unavailable\n    // on this provider; a stuck run is bounded by the coordinator's watchdog\n    // and the Durable Object lifecycle instead. `kill()` is a best-effort no-op.\n    const settled = this.sandbox.exec(command, {\n      ...(opts?.cwd ? { cwd: this.abs(opts.cwd) } : { cwd: this.workdir }),\n      ...(opts?.env ? { env: opts.env } : {}),\n      stream: true,\n      onOutput: (stream, data) => {\n        if (stream === 'stdout') stdout.push(data)\n        else stderr.push(data)\n      },\n    })\n    // End the output queues once the command settles either way (so the stdout\n    // reader terminates), but let a failure REJECT `wait()` rather than masking\n    // it as a clean exit — the harness adapter turns that into a RUN_ERROR\n    // instead of a silent zero-output run.\n    const exitPromise = settled.then(\n      (result) => {\n        stdout.end()\n        stderr.end()\n        return result.exitCode\n      },\n      (error: unknown) => {\n        stdout.end()\n        stderr.end()\n        throw error\n      },\n    )\n\n    return Promise.resolve({\n      pid: -1,\n      stdout,\n      stderr,\n      stdin: {\n        write: () =>\n          Promise.reject(\n            new Error(\n              'cloudflare: background processes do not expose stdin. Use exec(), or a stdin-capable provider (local-process / docker) for stdin-fed harnesses.',\n            ),\n          ),\n        end: () => Promise.resolve(),\n      },\n      wait: () => exitPromise,\n      kill: () => Promise.resolve(),\n    })\n  }\n\n  private async connectPort(port: number): Promise<SandboxChannel> {\n    if (this.previewHostname === undefined) {\n      throw new Error(\n        'cloudflare: ports.connect requires a previewHostname. Pass previewHostname (your Worker request hostname) to cloudflareSandbox(...).',\n      )\n    }\n    const { url } = await this.sandbox.exposePort(port, {\n      hostname: this.previewHostname,\n    })\n    return { url }\n  }\n\n  async destroy(): Promise<void> {\n    await this.sandbox.destroy()\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAiCA,IAAa,kBAAuC;CAClD,IAAI;CACJ,MAAM;CACN,KAAK;CACL,OAAO;CACP,qBAAqB;CAErB,eAAe;CAKf,mBAAmB;CACnB,WAAW;CACX,eAAe;CACf,mBAAmB;CACnB,MAAM;AACR;;AAGA,SAAS,EAAE,OAAuB;CAChC,OAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,EAAE;AAC1C;;AAGA,IAAM,cAAN,MAAkB;CAChB,SAAyC,CAAC;CAC1C,UAAuE,CAAC;CACxE,QAAgB;CAEhB,KAAK,OAAqB;EACxB,MAAM,SAAS,KAAK,QAAQ,MAAM;EAClC,IAAI,QAAQ,OAAO;GAAE;GAAO,MAAM;EAAM,CAAC;OACpC,KAAK,OAAO,KAAK,KAAK;CAC7B;CAEA,MAAY;EACV,KAAK,QAAQ;EACb,IAAI,SAAS,KAAK,QAAQ,MAAM;EAChC,OAAO,QAAQ;GACb,OAAO;IAAE,OAAO,KAAA;IAAW,MAAM;GAAK,CAAC;GACvC,SAAS,KAAK,QAAQ,MAAM;EAC9B;CACF;CAEA,QAAQ,OAAO,iBAAwC;EACrD,OAAO,CAAC,KAAK,SAAS,KAAK,OAAO,SAAS,GAAG;GAC5C,IAAI,KAAK,OAAO,SAAS,GAAG;IAC1B,MAAM,KAAK,OAAO,MAAM;IACxB;GACF;GACA,MAAM,OAAO,MAAM,IAAI,SAAiC,YACtD,KAAK,QAAQ,KAAK,OAAO,CAC3B;GACA,IAAI,KAAK,MAAM;GACf,MAAM,KAAK;EACb;CACF;AACF;AAEA,IAAa,mBAAb,MAAuD;CACrD;CACA,WAAoB;CACpB;CACA,eAAwB;CACxB;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CAEA,YACE,IACA,SACA,SACA,iBACA;EACA,KAAK,KAAK;EACV,KAAK,UAAU;EACf,KAAK,UAAU;EACf,KAAK,gBAAgB;EACrB,KAAK,kBAAkB;EAEvB,KAAK,UAAU;GACb,OAAO,SAAS,SAAS,KAAK,KAAK,SAAS,IAAI;GAChD,QAAQ,SAAS,SAAS,KAAK,aAAa,SAAS,IAAI;EAC3D;EAEA,KAAK,KAAK;GACR,MAAM,OAAO,MAAM;IACjB,MAAM,IAAI,MAAM,KAAK,KAAK,UAAU,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG;IACpD,IAAI,EAAE,aAAa,GAAG,MAAM,IAAI,MAAM,gBAAgB,EAAE,OAAO,KAAK,GAAG;IACvE,OAAO,OAAO,KAAK,EAAE,QAAQ,QAAQ,CAAC,CAAC,SAAS,MAAM;GACxD;GACA,WAAW,OAAO,MAAM;IACtB,MAAM,IAAI,MAAM,KAAK,KAAK,UAAU,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG;IACpD,IAAI,EAAE,aAAa,GAAG,MAAM,IAAI,MAAM,gBAAgB,EAAE,OAAO,KAAK,GAAG;IACvE,OAAO,IAAI,WAAW,OAAO,KAAK,EAAE,QAAQ,QAAQ,CAAC;GACvD;GACA,OAAO,OAAO,GAAG,SAAS;IACxB,MAAM,MAAM,KAAK,IAAI,CAAC;IACtB,MAAM,MAAM,OAAO,KACjB,OAAO,SAAS,WAAW,OAAO,KAAK,MAAM,MAAM,IAAI,IACzD,CAAC,CAAC,SAAS,QAAQ;IACnB,MAAM,MAAM,IAAI,QAAQ,YAAY,EAAE,KAAK;IAC3C,MAAM,IAAI,MAAM,KAAK,KACnB,YAAY,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,GAClE;IACA,IAAI,EAAE,aAAa,GACjB,MAAM,IAAI,MAAM,iBAAiB,EAAE,OAAO,KAAK,GAAG;GACtD;GACA,MAAM,OAAO,MAAM;IACjB,MAAM,IAAI,MAAM,KAAK,KAAK,WAAW,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG;IACrD,IAAI,EAAE,aAAa,GAAG,MAAM,IAAI,MAAM,gBAAgB,EAAE,OAAO,KAAK,GAAG;IACvE,OAAO,EAAE,OACN,MAAM,IAAI,CAAC,CACX,QAAQ,SAAS,KAAK,KAAK,MAAM,EAAE,CAAC,CACpC,KAAK,UAAU;KACd,MAAM,QAAQ,MAAM,SAAS,GAAG;KAChC,MAAM,OAAO,QAAQ,MAAM,MAAM,GAAG,EAAE,IAAI;KAC1C,OAAO;MACL;MACA,MAAM,GAAG,EAAE,QAAQ,OAAO,EAAE,EAAE,GAAG;MACjC,MAAM,QAAS,QAAmB;KACpC;IACF,CAAC;GACL;GACA,OAAO,OAAO,MAAM;IAClB,MAAM,KAAK,KAAK,YAAY,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG;GAC9C;GACA,QAAQ,OAAO,MAAM;IACnB,MAAM,KAAK,KAAK,UAAU,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG;GAC5C;GACA,QAAQ,OAAO,MAAM,OAAO;IAC1B,MAAM,KAAK,KAAK,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,GAAG;GAC9D;GACA,QAAQ,OAAO,MAAM;IAEnB,QAAO,MADS,KAAK,KAAK,WAAW,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,EAAA,CAC5C,aAAa;GACxB;EACF;EAEA,KAAK,MAAM,oBAAoB,KAAK,SAAS,KAAK,OAAO;EAEzD,KAAK,QAAQ,EACX,UAAU,SAAS,KAAK,YAAY,IAAI,EAC1C;EAEA,KAAK,MAAM,EACT,MAAM,SAAS,KAAK,QAAQ,WAAW,IAAI,EAC7C;CACF;CAEA,IAAY,GAAmB;EAC7B,IAAI,KAAK,YAAY,cAAc,OAAO;EAC1C,IAAI,MAAM,cAAc,OAAO,KAAK;EACpC,IAAI,EAAE,WAAW,aAAa,GAC5B,OAAO,GAAG,KAAK,QAAQ,GAAG,EAAE,MAAM,EAAoB;EAExD,OAAO;CACT;CAEA,MAAc,KACZ,SACA,MACqB;EACrB,MAAM,SAAS,MAAM,KAAK,QAAQ,KAAK,SAAS;GAC9C,GAAI,MAAM,MAAM,EAAE,KAAK,KAAK,IAAI,KAAK,GAAG,EAAE,IAAI,EAAE,KAAK,KAAK,QAAQ;GAClE,GAAI,MAAM,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;EACvC,CAAC;EACD,OAAO;GACL,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf,UAAU,OAAO;EACnB;CACF;CAEA,aACE,SACA,MACsB;EACtB,MAAM,SAAS,IAAI,YAAY;EAC/B,MAAM,SAAS,IAAI,YAAY;EA+B/B,MAAM,cAbU,KAAK,QAAQ,KAAK,SAAS;GACzC,GAAI,MAAM,MAAM,EAAE,KAAK,KAAK,IAAI,KAAK,GAAG,EAAE,IAAI,EAAE,KAAK,KAAK,QAAQ;GAClE,GAAI,MAAM,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;GACrC,QAAQ;GACR,WAAW,QAAQ,SAAS;IAC1B,IAAI,WAAW,UAAU,OAAO,KAAK,IAAI;SACpC,OAAO,KAAK,IAAI;GACvB;EACF,CAKoB,CAAA,CAAQ,MACzB,WAAW;GACV,OAAO,IAAI;GACX,OAAO,IAAI;GACX,OAAO,OAAO;EAChB,IACC,UAAmB;GAClB,OAAO,IAAI;GACX,OAAO,IAAI;GACX,MAAM;EACR,CACF;EAEA,OAAO,QAAQ,QAAQ;GACrB,KAAK;GACL;GACA;GACA,OAAO;IACL,aACE,QAAQ,uBACN,IAAI,MACF,iJACF,CACF;IACF,WAAW,QAAQ,QAAQ;GAC7B;GACA,YAAY;GACZ,YAAY,QAAQ,QAAQ;EAC9B,CAAC;CACH;CAEA,MAAc,YAAY,MAAuC;EAC/D,IAAI,KAAK,oBAAoB,KAAA,GAC3B,MAAM,IAAI,MACR,sIACF;EAEF,MAAM,EAAE,QAAQ,MAAM,KAAK,QAAQ,WAAW,MAAM,EAClD,UAAU,KAAK,gBACjB,CAAC;EACD,OAAO,EAAE,IAAI;CACf;CAEA,MAAM,UAAyB;EAC7B,MAAM,KAAK,QAAQ,QAAQ;CAC7B;AACF"}
+{"version":3,"file":"handle.js","names":[],"sources":["../../src/handle.ts"],"sourcesContent":["/**\n * SandboxHandle backed by a Cloudflare Sandbox (Containers + Durable Objects),\n * via `@cloudflare/sandbox`. Runs at the edge inside a Worker.\n *\n * fs is implemented over `exec` with chunked base64 piping (binary-safe),\n * matching the Docker provider. The container disk is EPHEMERAL (wiped to the image on\n * restart) and snapshots are not yet GA, so `capabilities.snapshots` and\n * `durableFilesystem` are false — `withSandbox` re-bootstraps under the same\n * identity across cold starts.\n *\n * LIMITATION: Cloudflare background processes do not expose a writable host→\n * process stdin, so `spawn().stdin.write` throws. This is advertised via\n * `capabilities.writableStdin: false`; harness adapters that feed a prompt over\n * stdin (e.g. the Claude Code adapter) detect this and instead deliver the\n * prompt via a file + shell stdin-redirection (`claude -p … < file`), which the\n * in-container shell handles with no host-side stdin write. `exec` (one-shot)\n * and streamed stdout from `spawn` both work fully.\n *\n * NOTE: not runtime-verified in this repo (requires a Workers runtime); it\n * compiles against the real `@cloudflare/sandbox` types and follows the proven\n * provider contract.\n */\nimport { createExecBackedGit } from '@tanstack/ai-sandbox'\nimport { fsWriteCommands } from './fs-write'\nimport type { Sandbox } from '@cloudflare/sandbox'\nimport type {\n  ExecResult,\n  ProcessOptions,\n  SandboxCapabilities,\n  SandboxChannel,\n  SandboxHandle,\n  SpawnHandle,\n  SandboxFsStat,\n} from '@tanstack/ai-sandbox'\n\nexport const CLOUDFLARE_CAPS: SandboxCapabilities = {\n  fs: true,\n  exec: true,\n  env: true,\n  ports: true,\n  backgroundProcesses: true,\n  // No writable host→process stdin; stdin-fed harnesses use file-redirection.\n  writableStdin: false,\n  // `spawnProcess.kill()` is a no-op (see the comment in `spawnProcess`) and\n  // the caller's abort signal is never forwarded to `sandbox.exec` — on\n  // `exec` as well as `spawn` — so a spawned follower process (e.g. `tail -f`)\n  // can never be stopped by the caller here.\n  killableProcesses: false,\n  snapshots: false,\n  networkPolicy: false,\n  durableFilesystem: false,\n  fork: false,\n}\n\n/** POSIX single-quote escape for embedding paths in `sh -c`. */\nfunction q(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`\n}\n\nconst LSTAT_MISSING = '__TANSTACK_LSTAT_MISSING__'\n\n/** Verify a missing path by listing parent entries. `test -e` also fails for inaccessible parents. */\nfunction lstatCommand(path: string): string {\n  return `tanstack_lstat_path=${q(path)}; tanstack_lstat_output=$(stat -c '%f:%s' -- \"$tanstack_lstat_path\" 2>&1); tanstack_lstat_status=$?; if [ \"$tanstack_lstat_status\" -eq 0 ]; then printf '%s\\n' \"$tanstack_lstat_output\"; else tanstack_lstat_missing() { tanstack_missing_path=$1; case \"$tanstack_missing_path\" in /|.) return 1 ;; */*) tanstack_parent=${'$'}{tanstack_missing_path%/*}; tanstack_name=${'$'}{tanstack_missing_path##*/}; [ -n \"$tanstack_parent\" ] || tanstack_parent=/ ;; *) tanstack_parent=.; tanstack_name=$tanstack_missing_path ;; esac; tanstack_parent_mode=$(stat -L -c '%f' -- \"$tanstack_parent\" 2>/dev/null); tanstack_parent_status=$?; if [ \"$tanstack_parent_status\" -ne 0 ]; then tanstack_lstat_missing \"$tanstack_parent\"; else case \"$tanstack_parent_mode\" in 4[0-9a-fA-F][0-9a-fA-F][0-9a-fA-F]) case \"$tanstack_parent\" in /*) tanstack_find_parent=$tanstack_parent ;; *) tanstack_find_parent=./$tanstack_parent ;; esac; tanstack_match=$(find -H \"$tanstack_find_parent\" -mindepth 1 -maxdepth 1 -exec sh -c 'tanstack_target=$1; shift; for tanstack_candidate do [ \"${'$'}{tanstack_candidate##*/}\" = \"$tanstack_target\" ] && { printf 1; exit 0; }; done; exit 0' sh \"$tanstack_name\" '{}' + 2>/dev/null); tanstack_find_status=$?; [ \"$tanstack_find_status\" -eq 0 ] && [ -z \"$tanstack_match\" ] ;; *) return 1 ;; esac; fi; }; if tanstack_lstat_missing \"$tanstack_lstat_path\"; then printf '%s' '${LSTAT_MISSING}'; else printf '%s\\n' \"$tanstack_lstat_output\" >&2; exit \"$tanstack_lstat_status\"; fi; fi`\n}\n\nfunction parseLstatOutput(output: string): SandboxFsStat {\n  const fields = /^(?<mode>[0-9a-fA-F]{4}):(?<size>\\d+)\\n?$/.exec(output)\n  const mode = fields?.groups?.mode\n  const size = fields?.groups?.size\n  if (!mode || !size) throw new Error(`invalid lstat output: ${output}`)\n  const parsedMode = Number.parseInt(mode, 16)\n  const parsedSize = Number(size)\n  if (\n    !Number.isSafeInteger(parsedMode) ||\n    !Number.isSafeInteger(parsedSize) ||\n    parsedSize < 0\n  )\n    throw new Error(`invalid lstat output: ${output}`)\n  const type = parsedMode & 0xf000\n  if (type === 0x8000)\n    return { type: 'file', mode: parsedMode, size: parsedSize }\n  if (type === 0x4000) return { type: 'dir', mode: parsedMode }\n  if (type === 0xa000) return { type: 'symlink', mode: parsedMode }\n  return { type: 'other', mode: parsedMode }\n}\n\n/** A push-driven async string queue used to adapt CF's onOutput callback. */\nclass OutputQueue {\n  private readonly buffer: Array<string> = []\n  private readonly waiters: Array<(r: IteratorResult<string>) => void> = []\n  private ended = false\n\n  push(value: string): void {\n    const waiter = this.waiters.shift()\n    if (waiter) waiter({ value, done: false })\n    else this.buffer.push(value)\n  }\n\n  end(): void {\n    this.ended = true\n    let waiter = this.waiters.shift()\n    while (waiter) {\n      waiter({ value: undefined, done: true })\n      waiter = this.waiters.shift()\n    }\n  }\n\n  async *[Symbol.asyncIterator](): AsyncIterator<string> {\n    while (!this.ended || this.buffer.length > 0) {\n      if (this.buffer.length > 0) {\n        yield this.buffer.shift() as string\n        continue\n      }\n      const next = await new Promise<IteratorResult<string>>((resolve) =>\n        this.waiters.push(resolve),\n      )\n      if (next.done) return\n      yield next.value\n    }\n  }\n}\n\nexport class CloudflareHandle implements SandboxHandle {\n  readonly id: string\n  readonly provider = 'cloudflare'\n  readonly workspaceRoot: string\n  readonly capabilities = CLOUDFLARE_CAPS\n  readonly fs: SandboxHandle['fs']\n  readonly git: SandboxHandle['git']\n  readonly process: SandboxHandle['process']\n  readonly ports: SandboxHandle['ports']\n  readonly env: SandboxHandle['env']\n\n  private readonly sandbox: Sandbox\n  private readonly workdir: string\n  private readonly previewHostname: string | undefined\n\n  constructor(\n    id: string,\n    sandbox: Sandbox,\n    workdir: string,\n    previewHostname?: string,\n  ) {\n    this.id = id\n    this.sandbox = sandbox\n    this.workdir = workdir\n    this.workspaceRoot = workdir\n    this.previewHostname = previewHostname\n\n    this.process = {\n      exec: (command, opts) => this.exec(command, opts),\n      spawn: (command, opts) => this.spawnProcess(command, opts),\n    }\n\n    this.fs = {\n      read: async (p) => {\n        const r = await this.exec(`base64 ${q(this.abs(p))}`)\n        if (r.exitCode !== 0) throw new Error(`read failed: ${r.stderr.trim()}`)\n        return Buffer.from(r.stdout, 'base64').toString('utf8')\n      },\n      readBytes: async (p) => {\n        const r = await this.exec(`base64 ${q(this.abs(p))}`)\n        if (r.exitCode !== 0) throw new Error(`read failed: ${r.stderr.trim()}`)\n        return new Uint8Array(Buffer.from(r.stdout, 'base64'))\n      },\n      write: async (p, data) => {\n        for (const command of fsWriteCommands(this.abs(p), data)) {\n          const r = await this.exec(command)\n          if (r.exitCode !== 0)\n            throw new Error(`write failed: ${r.stderr.trim()}`)\n        }\n      },\n      list: async (p) => {\n        const r = await this.exec(`ls -1Ap ${q(this.abs(p))}`)\n        if (r.exitCode !== 0) throw new Error(`list failed: ${r.stderr.trim()}`)\n        return r.stdout\n          .split('\\n')\n          .filter((line) => line.trim() !== '')\n          .map((entry) => {\n            const isDir = entry.endsWith('/')\n            const name = isDir ? entry.slice(0, -1) : entry\n            return {\n              name,\n              path: `${p.replace(/\\/$/, '')}/${name}`,\n              type: isDir ? ('dir' as const) : ('file' as const),\n            }\n          })\n      },\n      lstat: async (p) => this.lstat(this.abs(p)),\n      mkdir: async (p) => {\n        await this.exec(`mkdir -p ${q(this.abs(p))}`)\n      },\n      remove: async (p) => {\n        await this.exec(`rm -rf ${q(this.abs(p))}`)\n      },\n      rename: async (from, to) => {\n        await this.exec(`mv ${q(this.abs(from))} ${q(this.abs(to))}`)\n      },\n      exists: async (p) => {\n        const r = await this.exec(`test -e ${q(this.abs(p))}`)\n        return r.exitCode === 0\n      },\n    }\n\n    this.git = createExecBackedGit(this.process, this.workdir)\n\n    this.ports = {\n      connect: (port) => this.connectPort(port),\n    }\n\n    this.env = {\n      set: (vars) => this.sandbox.setEnvVars(vars),\n    }\n  }\n\n  private abs(p: string): string {\n    if (this.workdir === '/workspace') return p\n    if (p === '/workspace') return this.workdir\n    if (p.startsWith('/workspace/')) {\n      return `${this.workdir}/${p.slice('/workspace/'.length)}`\n    }\n    return p\n  }\n\n  private async lstat(path: string): Promise<SandboxFsStat | undefined> {\n    const r = await this.exec(lstatCommand(path))\n    if (r.exitCode === 0 && r.stdout.trim() === LSTAT_MISSING) return undefined\n    if (r.exitCode !== 0) {\n      throw new Error(`lstat failed: ${r.stderr.trim()}`)\n    }\n    return parseLstatOutput(r.stdout)\n  }\n\n  private async exec(\n    command: string,\n    opts?: ProcessOptions,\n  ): Promise<ExecResult> {\n    const result = await this.sandbox.exec(command, {\n      ...(opts?.cwd ? { cwd: this.abs(opts.cwd) } : { cwd: this.workdir }),\n      ...(opts?.env ? { env: opts.env } : {}),\n    })\n    return {\n      stdout: result.stdout,\n      stderr: result.stderr,\n      exitCode: result.exitCode,\n    }\n  }\n\n  private spawnProcess(\n    command: string,\n    opts?: ProcessOptions,\n  ): Promise<SpawnHandle> {\n    const stdout = new OutputQueue()\n    const stderr = new OutputQueue()\n\n    // Stream over `exec({ stream: true, onOutput })` — the SAME proven command\n    // path as one-shot `exec`. The background-process API (`startProcess` +\n    // `streamProcessLogs`) does NOT deliver its `onOutput`/`onExit` callbacks\n    // here (verified under `wrangler dev`: the process runs and exits cleanly,\n    // yet no log events ever arrive), so a stdout-NDJSON harness spawned that\n    // way hangs forever. exec's streaming path emits each chunk via `onOutput`\n    // and resolves with the exit code on completion. The prompt still reaches\n    // the CLI via in-shell stdin redirection (`… < file`), which this session\n    // shell honors — `writableStdin` stays false.\n    //\n    // The caller's AbortSignal is intentionally NOT forwarded: `exec` is a\n    // Durable Object RPC and Workers RPC cannot serialize an AbortSignal\n    // (\"AbortSignal serialization is not enabled\"), so passing one throws\n    // before the command runs. Mid-run cancellation is therefore unavailable\n    // on this provider; a stuck run is bounded by the coordinator's watchdog\n    // and the Durable Object lifecycle instead. `kill()` is a best-effort no-op.\n    const settled = this.sandbox.exec(command, {\n      ...(opts?.cwd ? { cwd: this.abs(opts.cwd) } : { cwd: this.workdir }),\n      ...(opts?.env ? { env: opts.env } : {}),\n      stream: true,\n      onOutput: (stream, data) => {\n        if (stream === 'stdout') stdout.push(data)\n        else stderr.push(data)\n      },\n    })\n    // End the output queues once the command settles either way (so the stdout\n    // reader terminates), but let a failure REJECT `wait()` rather than masking\n    // it as a clean exit — the harness adapter turns that into a RUN_ERROR\n    // instead of a silent zero-output run.\n    const exitPromise = settled.then(\n      (result) => {\n        stdout.end()\n        stderr.end()\n        return result.exitCode\n      },\n      (error: unknown) => {\n        stdout.end()\n        stderr.end()\n        throw error\n      },\n    )\n\n    return Promise.resolve({\n      pid: -1,\n      stdout,\n      stderr,\n      stdin: {\n        write: () =>\n          Promise.reject(\n            new Error(\n              'cloudflare: background processes do not expose stdin. Use exec(), or a stdin-capable provider (local-process / docker) for stdin-fed harnesses.',\n            ),\n          ),\n        end: () => Promise.resolve(),\n      },\n      wait: () => exitPromise,\n      kill: () => Promise.resolve(),\n    })\n  }\n\n  private async connectPort(port: number): Promise<SandboxChannel> {\n    if (this.previewHostname === undefined) {\n      throw new Error(\n        'cloudflare: ports.connect requires a previewHostname. Pass previewHostname (your Worker request hostname) to cloudflareSandbox(...).',\n      )\n    }\n    const { url } = await this.sandbox.exposePort(port, {\n      hostname: this.previewHostname,\n    })\n    return { url }\n  }\n\n  async destroy(): Promise<void> {\n    await this.sandbox.destroy()\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,IAAa,kBAAuC;CAClD,IAAI;CACJ,MAAM;CACN,KAAK;CACL,OAAO;CACP,qBAAqB;CAErB,eAAe;CAKf,mBAAmB;CACnB,WAAW;CACX,eAAe;CACf,mBAAmB;CACnB,MAAM;AACR;;AAGA,SAAS,EAAE,OAAuB;CAChC,OAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,EAAE;AAC1C;AAEA,IAAM,gBAAgB;;AAGtB,SAAS,aAAa,MAAsB;CAC1C,OAAO,uBAAuB,EAAE,IAAI,EAAE,40CAAw1C,cAAc;AAC94C;AAEA,SAAS,iBAAiB,QAA+B;CACvD,MAAM,SAAS,4CAA4C,KAAK,MAAM;CACtE,MAAM,OAAO,QAAQ,QAAQ;CAC7B,MAAM,OAAO,QAAQ,QAAQ;CAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,MAAM,IAAI,MAAM,yBAAyB,QAAQ;CACrE,MAAM,aAAa,OAAO,SAAS,MAAM,EAAE;CAC3C,MAAM,aAAa,OAAO,IAAI;CAC9B,IACE,CAAC,OAAO,cAAc,UAAU,KAChC,CAAC,OAAO,cAAc,UAAU,KAChC,aAAa,GAEb,MAAM,IAAI,MAAM,yBAAyB,QAAQ;CACnD,MAAM,OAAO,aAAa;CAC1B,IAAI,SAAS,OACX,OAAO;EAAE,MAAM;EAAQ,MAAM;EAAY,MAAM;CAAW;CAC5D,IAAI,SAAS,OAAQ,OAAO;EAAE,MAAM;EAAO,MAAM;CAAW;CAC5D,IAAI,SAAS,OAAQ,OAAO;EAAE,MAAM;EAAW,MAAM;CAAW;CAChE,OAAO;EAAE,MAAM;EAAS,MAAM;CAAW;AAC3C;;AAGA,IAAM,cAAN,MAAkB;CAChB,SAAyC,CAAC;CAC1C,UAAuE,CAAC;CACxE,QAAgB;CAEhB,KAAK,OAAqB;EACxB,MAAM,SAAS,KAAK,QAAQ,MAAM;EAClC,IAAI,QAAQ,OAAO;GAAE;GAAO,MAAM;EAAM,CAAC;OACpC,KAAK,OAAO,KAAK,KAAK;CAC7B;CAEA,MAAY;EACV,KAAK,QAAQ;EACb,IAAI,SAAS,KAAK,QAAQ,MAAM;EAChC,OAAO,QAAQ;GACb,OAAO;IAAE,OAAO,KAAA;IAAW,MAAM;GAAK,CAAC;GACvC,SAAS,KAAK,QAAQ,MAAM;EAC9B;CACF;CAEA,QAAQ,OAAO,iBAAwC;EACrD,OAAO,CAAC,KAAK,SAAS,KAAK,OAAO,SAAS,GAAG;GAC5C,IAAI,KAAK,OAAO,SAAS,GAAG;IAC1B,MAAM,KAAK,OAAO,MAAM;IACxB;GACF;GACA,MAAM,OAAO,MAAM,IAAI,SAAiC,YACtD,KAAK,QAAQ,KAAK,OAAO,CAC3B;GACA,IAAI,KAAK,MAAM;GACf,MAAM,KAAK;EACb;CACF;AACF;AAEA,IAAa,mBAAb,MAAuD;CACrD;CACA,WAAoB;CACpB;CACA,eAAwB;CACxB;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CAEA,YACE,IACA,SACA,SACA,iBACA;EACA,KAAK,KAAK;EACV,KAAK,UAAU;EACf,KAAK,UAAU;EACf,KAAK,gBAAgB;EACrB,KAAK,kBAAkB;EAEvB,KAAK,UAAU;GACb,OAAO,SAAS,SAAS,KAAK,KAAK,SAAS,IAAI;GAChD,QAAQ,SAAS,SAAS,KAAK,aAAa,SAAS,IAAI;EAC3D;EAEA,KAAK,KAAK;GACR,MAAM,OAAO,MAAM;IACjB,MAAM,IAAI,MAAM,KAAK,KAAK,UAAU,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG;IACpD,IAAI,EAAE,aAAa,GAAG,MAAM,IAAI,MAAM,gBAAgB,EAAE,OAAO,KAAK,GAAG;IACvE,OAAO,OAAO,KAAK,EAAE,QAAQ,QAAQ,CAAC,CAAC,SAAS,MAAM;GACxD;GACA,WAAW,OAAO,MAAM;IACtB,MAAM,IAAI,MAAM,KAAK,KAAK,UAAU,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG;IACpD,IAAI,EAAE,aAAa,GAAG,MAAM,IAAI,MAAM,gBAAgB,EAAE,OAAO,KAAK,GAAG;IACvE,OAAO,IAAI,WAAW,OAAO,KAAK,EAAE,QAAQ,QAAQ,CAAC;GACvD;GACA,OAAO,OAAO,GAAG,SAAS;IACxB,KAAK,MAAM,WAAW,gBAAgB,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG;KACxD,MAAM,IAAI,MAAM,KAAK,KAAK,OAAO;KACjC,IAAI,EAAE,aAAa,GACjB,MAAM,IAAI,MAAM,iBAAiB,EAAE,OAAO,KAAK,GAAG;IACtD;GACF;GACA,MAAM,OAAO,MAAM;IACjB,MAAM,IAAI,MAAM,KAAK,KAAK,WAAW,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG;IACrD,IAAI,EAAE,aAAa,GAAG,MAAM,IAAI,MAAM,gBAAgB,EAAE,OAAO,KAAK,GAAG;IACvE,OAAO,EAAE,OACN,MAAM,IAAI,CAAC,CACX,QAAQ,SAAS,KAAK,KAAK,MAAM,EAAE,CAAC,CACpC,KAAK,UAAU;KACd,MAAM,QAAQ,MAAM,SAAS,GAAG;KAChC,MAAM,OAAO,QAAQ,MAAM,MAAM,GAAG,EAAE,IAAI;KAC1C,OAAO;MACL;MACA,MAAM,GAAG,EAAE,QAAQ,OAAO,EAAE,EAAE,GAAG;MACjC,MAAM,QAAS,QAAmB;KACpC;IACF,CAAC;GACL;GACA,OAAO,OAAO,MAAM,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC;GAC1C,OAAO,OAAO,MAAM;IAClB,MAAM,KAAK,KAAK,YAAY,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG;GAC9C;GACA,QAAQ,OAAO,MAAM;IACnB,MAAM,KAAK,KAAK,UAAU,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG;GAC5C;GACA,QAAQ,OAAO,MAAM,OAAO;IAC1B,MAAM,KAAK,KAAK,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,GAAG;GAC9D;GACA,QAAQ,OAAO,MAAM;IAEnB,QAAO,MADS,KAAK,KAAK,WAAW,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,EAAA,CAC5C,aAAa;GACxB;EACF;EAEA,KAAK,MAAM,oBAAoB,KAAK,SAAS,KAAK,OAAO;EAEzD,KAAK,QAAQ,EACX,UAAU,SAAS,KAAK,YAAY,IAAI,EAC1C;EAEA,KAAK,MAAM,EACT,MAAM,SAAS,KAAK,QAAQ,WAAW,IAAI,EAC7C;CACF;CAEA,IAAY,GAAmB;EAC7B,IAAI,KAAK,YAAY,cAAc,OAAO;EAC1C,IAAI,MAAM,cAAc,OAAO,KAAK;EACpC,IAAI,EAAE,WAAW,aAAa,GAC5B,OAAO,GAAG,KAAK,QAAQ,GAAG,EAAE,MAAM,EAAoB;EAExD,OAAO;CACT;CAEA,MAAc,MAAM,MAAkD;EACpE,MAAM,IAAI,MAAM,KAAK,KAAK,aAAa,IAAI,CAAC;EAC5C,IAAI,EAAE,aAAa,KAAK,EAAE,OAAO,KAAK,MAAM,eAAe,OAAO,KAAA;EAClE,IAAI,EAAE,aAAa,GACjB,MAAM,IAAI,MAAM,iBAAiB,EAAE,OAAO,KAAK,GAAG;EAEpD,OAAO,iBAAiB,EAAE,MAAM;CAClC;CAEA,MAAc,KACZ,SACA,MACqB;EACrB,MAAM,SAAS,MAAM,KAAK,QAAQ,KAAK,SAAS;GAC9C,GAAI,MAAM,MAAM,EAAE,KAAK,KAAK,IAAI,KAAK,GAAG,EAAE,IAAI,EAAE,KAAK,KAAK,QAAQ;GAClE,GAAI,MAAM,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;EACvC,CAAC;EACD,OAAO;GACL,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf,UAAU,OAAO;EACnB;CACF;CAEA,aACE,SACA,MACsB;EACtB,MAAM,SAAS,IAAI,YAAY;EAC/B,MAAM,SAAS,IAAI,YAAY;EA+B/B,MAAM,cAbU,KAAK,QAAQ,KAAK,SAAS;GACzC,GAAI,MAAM,MAAM,EAAE,KAAK,KAAK,IAAI,KAAK,GAAG,EAAE,IAAI,EAAE,KAAK,KAAK,QAAQ;GAClE,GAAI,MAAM,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;GACrC,QAAQ;GACR,WAAW,QAAQ,SAAS;IAC1B,IAAI,WAAW,UAAU,OAAO,KAAK,IAAI;SACpC,OAAO,KAAK,IAAI;GACvB;EACF,CAKoB,CAAA,CAAQ,MACzB,WAAW;GACV,OAAO,IAAI;GACX,OAAO,IAAI;GACX,OAAO,OAAO;EAChB,IACC,UAAmB;GAClB,OAAO,IAAI;GACX,OAAO,IAAI;GACX,MAAM;EACR,CACF;EAEA,OAAO,QAAQ,QAAQ;GACrB,KAAK;GACL;GACA;GACA,OAAO;IACL,aACE,QAAQ,uBACN,IAAI,MACF,iJACF,CACF;IACF,WAAW,QAAQ,QAAQ;GAC7B;GACA,YAAY;GACZ,YAAY,QAAQ,QAAQ;EAC9B,CAAC;CACH;CAEA,MAAc,YAAY,MAAuC;EAC/D,IAAI,KAAK,oBAAoB,KAAA,GAC3B,MAAM,IAAI,MACR,sIACF;EAEF,MAAM,EAAE,QAAQ,MAAM,KAAK,QAAQ,WAAW,MAAM,EAClD,UAAU,KAAK,gBACjB,CAAC;EACD,OAAO,EAAE,IAAI;CACf;CAEA,MAAM,UAAyB;EAC7B,MAAM,KAAK,QAAQ,QAAQ;CAC7B;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tanstack/ai-sandbox-cloudflare",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "description": "Cloudflare sandbox provider for TanStack AI — run harness adapters inside Cloudflare Containers (edge) through the uniform SandboxHandle.",
   "author": "",
   "license": "MIT",
@@ -45,18 +45,18 @@
   },
   "peerDependencies": {
     "zod": "^4.0.0",
-    "@tanstack/ai": "^0.46.0",
-    "@tanstack/ai-sandbox": "^0.3.4",
-    "@tanstack/ai-sandbox-local-process": "^0.2.2"
+    "@tanstack/ai": "^0.47.1",
+    "@tanstack/ai-sandbox": "^0.4.0",
+    "@tanstack/ai-sandbox-local-process": "^0.2.3"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20260317.1",
     "@types/node": "^24.10.1",
     "@vitest/coverage-v8": "4.1.10",
     "zod": "^4.2.0",
-    "@tanstack/ai": "0.46.0",
-    "@tanstack/ai-sandbox": "0.3.4",
-    "@tanstack/ai-sandbox-local-process": "0.2.2"
+    "@tanstack/ai": "0.47.1",
+    "@tanstack/ai-sandbox": "0.4.0",
+    "@tanstack/ai-sandbox-local-process": "0.2.3"
   },
   "scripts": {
     "build": "vite build",

package/src/fs-write.ts

@@ -0,0 +1,35 @@
+/**
+ * Build in-container `sh -c` commands that write a file without putting the
+ * whole payload on one argv.
+ *
+ * Linux `MAX_ARG_STRLEN` is 128 KiB for a single argument. A snapshot restore
+ * of a lockfile or generated source exceeds that when the bytes are quoted
+ * into `printf`.
+ */
+
+/** Stay well under `MAX_ARG_STRLEN` after base64 and quoting. */
+export const FS_WRITE_BYTE_CHUNK = 32_768
+
+function quote(value: string): string {
+  return `'${value.replace(/'/g, `'\\''`)}'`
+}
+
+export function fsWriteCommands(
+  abs: string,
+  data: string | Uint8Array,
+): Array<string> {
+  const bytes =
+    typeof data === 'string' ? Buffer.from(data, 'utf8') : Buffer.from(data)
+  const dir = abs.replace(/\/[^/]*$/, '') || '/'
+  const commands = [`mkdir -p ${quote(dir)} && : > ${quote(abs)}`]
+  for (
+    let offset = 0;
+    offset < bytes.byteLength;
+    offset += FS_WRITE_BYTE_CHUNK
+  ) {
+    const slice = bytes.subarray(offset, offset + FS_WRITE_BYTE_CHUNK)
+    const b64 = Buffer.from(slice).toString('base64')
+    commands.push(`printf %s ${quote(b64)} | base64 -d >> ${quote(abs)}`)
+  }
+  return commands
+}

package/src/handle.ts

@@ -2,8 +2,8 @@
  * SandboxHandle backed by a Cloudflare Sandbox (Containers + Durable Objects),
  * via `@cloudflare/sandbox`. Runs at the edge inside a Worker.
  *
- * fs is implemented over `exec` with base64 piping (binary-safe), matching the
- * Docker provider. The container disk is EPHEMERAL (wiped to the image on
+ * fs is implemented over `exec` with chunked base64 piping (binary-safe),
+ * matching the Docker provider. The container disk is EPHEMERAL (wiped to the image on
  * restart) and snapshots are not yet GA, so `capabilities.snapshots` and
  * `durableFilesystem` are false — `withSandbox` re-bootstraps under the same
  * identity across cold starts.
@@ -21,6 +21,7 @@
  * provider contract.
  */
 import { createExecBackedGit } from '@tanstack/ai-sandbox'
+import { fsWriteCommands } from './fs-write'
 import type { Sandbox } from '@cloudflare/sandbox'
 import type {
   ExecResult,
@@ -29,6 +30,7 @@ import type {
   SandboxChannel,
   SandboxHandle,
   SpawnHandle,
+  SandboxFsStat,
 } from '@tanstack/ai-sandbox'
 
 export const CLOUDFLARE_CAPS: SandboxCapabilities = {
@@ -55,6 +57,34 @@ function q(value: string): string {
   return `'${value.replace(/'/g, `'\\''`)}'`
 }
 
+const LSTAT_MISSING = '__TANSTACK_LSTAT_MISSING__'
+
+/** Verify a missing path by listing parent entries. `test -e` also fails for inaccessible parents. */
+function lstatCommand(path: string): string {
+  return `tanstack_lstat_path=${q(path)}; tanstack_lstat_output=$(stat -c '%f:%s' -- "$tanstack_lstat_path" 2>&1); tanstack_lstat_status=$?; if [ "$tanstack_lstat_status" -eq 0 ]; then printf '%s\n' "$tanstack_lstat_output"; else tanstack_lstat_missing() { tanstack_missing_path=$1; case "$tanstack_missing_path" in /|.) return 1 ;; */*) tanstack_parent=${'$'}{tanstack_missing_path%/*}; tanstack_name=${'$'}{tanstack_missing_path##*/}; [ -n "$tanstack_parent" ] || tanstack_parent=/ ;; *) tanstack_parent=.; tanstack_name=$tanstack_missing_path ;; esac; tanstack_parent_mode=$(stat -L -c '%f' -- "$tanstack_parent" 2>/dev/null); tanstack_parent_status=$?; if [ "$tanstack_parent_status" -ne 0 ]; then tanstack_lstat_missing "$tanstack_parent"; else case "$tanstack_parent_mode" in 4[0-9a-fA-F][0-9a-fA-F][0-9a-fA-F]) case "$tanstack_parent" in /*) tanstack_find_parent=$tanstack_parent ;; *) tanstack_find_parent=./$tanstack_parent ;; esac; tanstack_match=$(find -H "$tanstack_find_parent" -mindepth 1 -maxdepth 1 -exec sh -c 'tanstack_target=$1; shift; for tanstack_candidate do [ "${'$'}{tanstack_candidate##*/}" = "$tanstack_target" ] && { printf 1; exit 0; }; done; exit 0' sh "$tanstack_name" '{}' + 2>/dev/null); tanstack_find_status=$?; [ "$tanstack_find_status" -eq 0 ] && [ -z "$tanstack_match" ] ;; *) return 1 ;; esac; fi; }; if tanstack_lstat_missing "$tanstack_lstat_path"; then printf '%s' '${LSTAT_MISSING}'; else printf '%s\n' "$tanstack_lstat_output" >&2; exit "$tanstack_lstat_status"; fi; fi`
+}
+
+function parseLstatOutput(output: string): SandboxFsStat {
+  const fields = /^(?<mode>[0-9a-fA-F]{4}):(?<size>\d+)\n?$/.exec(output)
+  const mode = fields?.groups?.mode
+  const size = fields?.groups?.size
+  if (!mode || !size) throw new Error(`invalid lstat output: ${output}`)
+  const parsedMode = Number.parseInt(mode, 16)
+  const parsedSize = Number(size)
+  if (
+    !Number.isSafeInteger(parsedMode) ||
+    !Number.isSafeInteger(parsedSize) ||
+    parsedSize < 0
+  )
+    throw new Error(`invalid lstat output: ${output}`)
+  const type = parsedMode & 0xf000
+  if (type === 0x8000)
+    return { type: 'file', mode: parsedMode, size: parsedSize }
+  if (type === 0x4000) return { type: 'dir', mode: parsedMode }
+  if (type === 0xa000) return { type: 'symlink', mode: parsedMode }
+  return { type: 'other', mode: parsedMode }
+}
+
 /** A push-driven async string queue used to adapt CF's onOutput callback. */
 class OutputQueue {
   private readonly buffer: Array<string> = []
@@ -135,16 +165,11 @@ export class CloudflareHandle implements SandboxHandle {
         return new Uint8Array(Buffer.from(r.stdout, 'base64'))
       },
       write: async (p, data) => {
-        const abs = this.abs(p)
-        const b64 = Buffer.from(
-          typeof data === 'string' ? Buffer.from(data, 'utf8') : data,
-        ).toString('base64')
-        const dir = abs.replace(/\/[^/]*$/, '') || '/'
-        const r = await this.exec(
-          `mkdir -p ${q(dir)} && printf %s ${q(b64)} | base64 -d > ${q(abs)}`,
-        )
-        if (r.exitCode !== 0)
-          throw new Error(`write failed: ${r.stderr.trim()}`)
+        for (const command of fsWriteCommands(this.abs(p), data)) {
+          const r = await this.exec(command)
+          if (r.exitCode !== 0)
+            throw new Error(`write failed: ${r.stderr.trim()}`)
+        }
       },
       list: async (p) => {
         const r = await this.exec(`ls -1Ap ${q(this.abs(p))}`)
@@ -162,6 +187,7 @@ export class CloudflareHandle implements SandboxHandle {
             }
           })
       },
+      lstat: async (p) => this.lstat(this.abs(p)),
       mkdir: async (p) => {
         await this.exec(`mkdir -p ${q(this.abs(p))}`)
       },
@@ -197,6 +223,15 @@ export class CloudflareHandle implements SandboxHandle {
     return p
   }
 
+  private async lstat(path: string): Promise<SandboxFsStat | undefined> {
+    const r = await this.exec(lstatCommand(path))
+    if (r.exitCode === 0 && r.stdout.trim() === LSTAT_MISSING) return undefined
+    if (r.exitCode !== 0) {
+      throw new Error(`lstat failed: ${r.stderr.trim()}`)
+    }
+    return parseLstatOutput(r.stdout)
+  }
+
   private async exec(
     command: string,
     opts?: ProcessOptions,